Table 6.

The input and output differential between the S-boxes of ΔS₁ and $\mathrm{\Delta }{S}_1^s$ (0 refers to the least significant bit).

situation	$\mathrm{\Delta }{S}_{0-4}^1[i]$	$\mathrm{\Delta }{S}_{0-4}^{1,s}[i]$	number of S-boxes	i
1	11001	10000	7	7,12,16,43,48,57,61
2	00011	10000	3	15,22,32
3	01001	10000	18	1,3,8,9,13,18,21,25,28,37,42,49,50,51,52,54,55,59